CVE-2008-0696

IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors...

DB2 < 8.1 FixPak 16 Multiple Vulnerabilities (deprecated)

Binary data 4358.prm...

GLSA-200801-16 : MaraDNS: CNAME Denial of Service

The remote host is affected by the vulnerability described in GLSA-200801-16 MaraDNS: CNAME Denial of Service Michael Krieger reported that a specially crafted DNS could prevent an authoritative canonical name CNAME record from being resolved because of an 'improper rotation of resource records'...

Fedora 7 : xorg-x11-server-1.3.0.0-16.fc7 (2008-0956)

When enabling the 'unredirect fullscreen windows' option, compiz will unredirect fullscreen windows to improve performace. However, unredirecting will as a side effect break any grabs on that window, which compromises most screensavers. This X server update suppresses this unintended side effect...

AXIGEN 5.0.x AXIMilter Format String Exploit

/ Axigen 5.0.x AXIMilter Format String Exploit by hempel JAN 16 2008 thx to mu-b digit-labs.org / include stdio.h include netinet/in.h include sys/socket.h include sys/types.h include sys/uio.h include unistd.h include string.h char buf = "FROM:rnEHLO:rnCNIP:rnCNPO:rnCNHO: " / offsets /...

Unfixed XSS vulnerability at www.whatsmypagerank.com

Security researcher quangntenemy, has submitted on 16/01/2008 a cross-site-scripting XSS vulnerability affecting www.whatsmypagerank.com, which at the time of submission ranked 213500 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. ...

Unfixed XSS vulnerability at imagenavi.jp

Security researcher Persian Fox, has submitted on 16/01/2008 a cross-site-scripting XSS vulnerability affecting imagenavi.jp, which at the time of submission ranked 37638 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/01/2008. It is current...

Unfixed XSS vulnerability at www.rpg.net

Security researcher Uber0n, has submitted on 16/01/2008 a cross-site-scripting XSS vulnerability affecting www.rpg.net, which at the time of submission ranked 23961 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currently...

Unfixed XSS vulnerability at www.behtarincd.com

Security researcher TreX, has submitted on 16/12/2007 a cross-site-scripting XSS vulnerability affecting www.behtarincd.com, which at the time of submission ranked 114244 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2008. It is current...

Unfixed XSS vulnerability at www.behtarinbazi.com

Security researcher TreX, has submitted on 16/12/2007 a cross-site-scripting XSS vulnerability affecting www.behtarinbazi.com, which at the time of submission ranked 227825 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2008. It is...

Unfixed XSS vulnerability at www.airasia.com

Security researcher DerickTham, has submitted on 16/12/2007 a cross-site-scripting XSS vulnerability affecting www.airasia.com, which at the time of submission ranked 2421 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2007. It is...

AMD64 x86 emulation Qt library: Multiple vulnerabilities

Background Qt is a cross-platform GUI framework, which is used e.g. by KDE. The AMD64 x86 emulation Qt library packages Qt libraries for 32bit x86 emulation on AMD64. Description The Qt versions used by the AMD64 x86 emulation Qt libraries were vulnerable to several flaws GLSA 200708-16, GLSA...

Unfixed XSS vulnerability at www.sternstunden-jena.de

Security researcher bate, has submitted on 16/11/2007 a cross-site-scripting XSS vulnerability affecting www.sternstunden-jena.de, which at the time of submission ranked 1862389 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

Unfixed XSS vulnerability at www.schwarz-auf-weiss.de

Security researcher Langy, has submitted on 16/11/2007 a cross-site-scripting XSS vulnerability affecting www.schwarz-auf-weiss.de, which at the time of submission ranked 203100 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

Fedora 7 : firestarter-1.0.3-16.fc7 (2007-0700)

Tue Jun 26 2007 Damien Durand - 1.0.3-16 - Fix BR - Fix active connections status - Sun Jun 17 2007 Damien Durand - 1.0.3-15 - Remove old doc - Fix pam configuration Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

CVE-2002-2401

NTVDM.EXE in Windows 2000/NT/XP fails to verify user execution permissions for 16‑bit executables, allowing local users to bypass the loader and run arbitrary programs. Root cause: missing permission verification on 16‑bit file execution. Mitigation/remediation details are not provided in the con...

CVE-2002-2401

NT Virtual DOS Machine NTVDM.EXE in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3547)

This update brings Mozilla Firefox to security update version 2.0.0.4 This is a major upgrade from the Firefox 1.5.0.x line for SUSE Linux 10.0 and 10.1. - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the...

Unfixed XSS vulnerability at www.sms-praha.cz

Security researcher kusomiso.com, has submitted on 16/10/2007 a cross-site-scripting XSS vulnerability affecting www.sms-praha.cz, which at the time of submission ranked 1486214 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...

Unfixed XSS vulnerability at www.onurhosting.net

Security researcher kusomiso.com, has submitted on 16/10/2007 a cross-site-scripting XSS vulnerability affecting www.onurhosting.net, which at the time of submission ranked 1365338 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/10/2007. It ...